SAP BusinessObjects Web Intelligence Cross-Site Scripting Vulnerability

SAP BusinessObjects Germany SAP SAP a company provides a variety of business intelligence software, information management software, enterprise performance management solutions, regulatory, risk and compliance solutions. A cross-site scripting vulnerability exists in SAP BusinessObjects Web...

CVE-2017-12415

OXID eShop Community Edition before 6.0.0 RC2 development, 4.10.x before 4.10.5 maintenance, and 4.9.x before 4.9.10 legacy, Enterprise Edition before 6.0.0 RC2 development, 5.2.x before 5.2.10 legacy, and 5.3.x before 5.3.5 maintenance, and Professional Edition before 6.0.0 RC2 development, 4.9....

CVE-2017-12415

OXID eShop Community Edition before 6.0.0 RC2 development, 4.10.x before 4.10.5 maintenance, and 4.9.x before 4.9.10 legacy, Enterprise Edition before 6.0.0 RC2 development, 5.2.x before 5.2.10 legacy, and 5.3.x before 5.3.5 maintenance, and Professional Edition before 6.0.0 RC2 development, 4.9....

The vulnerability of Kaspersky Secure Mail Gateway’s email protection mechanism, which stems from the absence of a CSRF token in web forms, allows for the hijacking of the administrator’s session.

The vulnerability of Kaspersky Secure Mail Gateway’s email protection mechanism lies in the absence of a CSRF token in web forms. Exploiting this vulnerability allows an attacker to forge inter-site requests and intercept the administrator’s session...

Session fixation

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164...

CVE-2017-1693

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164...

CVE-2017-1693

IBM Integration Bus versions 9.0.0.0–9.0.0.8 and 10.0.0.0–10.0.0.9 are affected by CVE-2017-1693, which allows session hijacking if an attacker has a valid session ID, during a short window before timeout. The IBM Security Bulletin confirms remediation via APAR IT21158, with fixes available in 9....

CVE-2017-1693

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164...

CVE-2017-9964

A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack...

CVE-2017-9964

A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack...

Path traversal

A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack...

CVE-2017-9964

CVE-2017-9964 affects Schneider Electric Pelco VideoXpert Enterprise (all versions before 2.1). It is a path traversal flaw that, by sniffing communications, allows an unauthorized attacker to perform directory traversal, potentially causing authentication bypass or session hijack. Documents cons...

CVE-2017-9964

A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack...

Cambium Networks ePMP Cross-Site Scripting Vulnerability

Cambium Networks ePMP is a suite of wireless network access platforms from Cambium Networks, USA. The platform provides video surveillance, Wi-Fi hotspot and sensor connectivity. A cross-site scripting vulnerability exists in Cambium Networks ePMP using firmware version 3.5 and earlier. An attack...

Cambium Networks ePMP Cross-Site Scripting Vulnerability (CNVD-2018-01043)

Cambium Networks ePMP is a suite of wireless network access platforms from Cambium Networks, USA. The platform provides video surveillance, Wi-Fi hotspot and sensor connectivity. A cross-site scripting vulnerability exists in Cambium Networks ePMP using firmware version 3.5 and earlier, which ste...

CVE-2017-17476

Open Ticket Request System OTRS 4.0.x before 4.0.28, 5.0.x before 5.0.26, and 6.0.x before 6.0.3, when cookie support is disabled, might allow remote attackers to hijack web sessions and consequently gain privileges via a crafted email...

Open redirect

Open Ticket Request System OTRS 4.0.x before 4.0.28, 5.0.x before 5.0.26, and 6.0.x before 6.0.3, when cookie support is disabled, might allow remote attackers to hijack web sessions and consequently gain privileges via a crafted email...

DEBIAN-CVE-2017-17476

Open Ticket Request System OTRS 4.0.x before 4.0.28, 5.0.x before 5.0.26, and 6.0.x before 6.0.3, when cookie support is disabled, might allow remote attackers to hijack web sessions and consequently gain privileges via a crafted email...

CVE-2017-12348

Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting XSS attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs:...

CVE-2017-12349

Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cross-site scripting XSS attack against a user of the affected interface or hijack a valid session ID from a user of the affected interface. Cisco Bug IDs:...